Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
File:                     323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa (raw, json)
Hash identifier:          5BtP9LRM1xVTMl5PvihJxVsUZVyGtb7XMMsbmO4NZgA=
Subject key identifier:   98:B3:12:C7:88:B8:D6:E2:E2:47:D0:19:89:FB:C5:24:93:05:37:EE
Certificate issuer:       /CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
Certificate serial:       320936209607D0BC0537C881952BFA2F97FAA57F
Authority key identifier: 6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     266248
IP address blocks:        2804:3d04:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl
                          rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:09:36:20:96:07:d0:bc:05:37:c8:81:95:2b:fa:2f:97:fa:a5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7B780BAB3AF319A8FA16322A5036CB7F270458
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:41:03:eb:d2:02:96:9b:40:70:c6:ac:a9:
                    71:04:ee:29:00:74:07:0d:16:d2:fa:26:ad:05:60:
                    2a:4a:72:c5:be:cc:e7:e4:7e:c2:e2:b6:33:ca:72:
                    db:43:bf:8f:0d:5b:ef:da:06:a2:07:f7:7a:d6:5b:
                    74:2a:dd:be:2e:af:44:e5:36:eb:26:ea:3d:ee:8e:
                    1b:0c:9c:68:56:98:90:fb:0e:10:35:4e:bf:ef:56:
                    7c:6b:e0:2b:62:bd:a2:22:67:7d:8f:f8:29:f0:00:
                    39:8d:09:26:a8:b8:2e:99:06:98:ac:ad:dd:14:32:
                    83:86:4e:87:63:8d:08:14:3f:0e:42:3d:b0:89:28:
                    c4:46:6e:6d:3e:5d:9e:19:cb:bc:22:32:4c:89:6e:
                    33:c1:17:89:8a:67:35:d2:85:e4:c6:60:a8:04:77:
                    f4:55:3d:ad:32:65:87:b6:29:10:84:cf:5a:f0:5e:
                    57:09:82:5f:46:4c:fb:cd:16:2a:a3:5c:4c:9c:d3:
                    9b:7b:3a:5f:13:bc:0f:f1:36:bc:c6:b3:49:6e:72:
                    c7:59:fe:44:c1:73:5a:3f:f8:83:f1:b6:d5:ef:bc:
                    d9:00:c4:24:8d:22:94:5a:d2:27:81:75:9f:e7:36:
                    e7:10:35:13:7e:6d:8f:bf:5d:a3:d5:4c:ff:6b:90:
                    1b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:12:C7:88:B8:D6:E2:E2:47:D0:19:89:FB:C5:24:93:05:37:EE
            X509v3 Authority Key Identifier:
                keyid:6F:7B:78:0B:AB:3A:F3:19:A8:FA:16:32:2A:50:36:CB:7F:27:04:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7B780BAB3AF319A8FA16322A5036CB7F270458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/1/323830343a336430343a623030303a3a2f33362d3336203d3e20323636323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d04:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:23:68:b0:a0:e1:bf:cf:a6:d4:88:98:c1:26:1b:45:36:f7:
         1c:fc:60:cf:6d:7f:75:1e:e4:ba:75:33:b8:3f:8b:b5:b5:5b:
         23:1f:f3:c4:73:91:4f:b4:74:d8:70:91:62:dd:77:e1:b2:f3:
         d3:26:73:86:f4:11:b9:29:bc:1b:00:dc:0b:af:21:14:63:be:
         21:8d:fb:5e:fb:6e:42:58:6e:f4:a9:d8:c4:30:85:e1:aa:f6:
         2d:9a:c4:96:ec:d5:c5:59:1c:8b:3e:2d:5b:c4:56:e9:8f:53:
         fd:a5:91:91:05:69:46:c0:25:18:6f:32:1d:55:45:55:bf:32:
         52:89:2e:27:dc:1e:94:7e:36:79:26:04:7a:db:cc:51:f8:a6:
         9e:e8:d6:72:5a:9e:8b:26:c6:28:1b:c5:48:f6:dc:85:84:6f:
         20:40:83:4c:7d:97:e1:86:57:77:73:3d:09:11:fe:19:c9:a1:
         65:61:fb:0c:e1:87:4b:76:cd:35:b2:13:1a:55:e7:3e:7c:1a:
         22:a1:28:39:58:52:77:63:06:22:f6:e6:a6:62:6e:70:80:ac:
         be:49:d4:10:82:de:e1:34:d4:b1:85:5f:20:a6:6b:27:bc:7e:
         40:8a:1e:ae:60:0f:66:42:98:9e:f8:96:28:9a:fb:8c:3c:7c:
         e6:a0:83:41
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUMgk2IJYH0LwFN8iBlSv6L5f6pX8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3Qjc4MEJBQjNBRjMxOUE4RkExNjMyMkE1MDM2Q0I3
RjI3MDQ1ODAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkM5NzQxMDNFQkQyMDI5NjlC
NDA3MEM2QUNBOTcxMDRFRTI5MDA3NDA3MEQxNkQyRkEyNkFEMDU2MDJBNEE3MkM1
QkVDQ0U3RTQ3RUMyRTJCNjMzQ0E3MkRCNDNCRjhGMEQ1QkVGREEwNkEyMDdGNzdB
RDY1Qjc0MkFEREJFMkVBRjQ0RTUzNkVCMjZFQTNERUU4RTFCMEM5QzY4NTY5ODkw
RkIwRTEwMzU0RUJGRUY1NjdDNkJFMDJCNjJCREEyMjI2NzdEOEZGODI5RjAwMDM5
OEQwOTI2QThCODJFOTkwNjk4QUNBREREMTQzMjgzODY0RTg3NjM4RDA4MTQzRjBF
NDIzREIwODkyOEM0NDY2RTZEM0U1RDlFMTlDQkJDMjIzMjRDODk2RTMzQzExNzg5
OEE2NzM1RDI4NUU0QzY2MEE4MDQ3N0Y0NTUzREFEMzI2NTg3QjYyOTEwODRDRjVB
RjA1RTU3MDk4MjVGNDY0Q0ZCQ0QxNjJBQTM1QzRDOUNEMzlCN0IzQTVGMTNCQzBG
RjEzNkJDQzZCMzQ5NkU3MkM3NTlGRTQ0QzE3MzVBM0ZGODgzRjFCNkQ1RUZCQ0Q5
MDBDNDI0OEQyMjk0NUFEMjI3ODE3NTlGRTczNkU3MTAzNTEzN0U2RDhGQkY1REEz
RDU0Q0ZGNkI5MDFCMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvJdBA+vSApabQHDGrKlxBO4pAHQHDRbS+iatBWAqSnLFvszn5H7C
4rYzynLbQ7+PDVvv2gaiB/d61lt0Kt2+Lq9E5TbrJuo97o4bDJxoVpiQ+w4QNU6/
71Z8a+ArYr2iImd9j/gp8AA5jQkmqLgumQaYrK3dFDKDhk6HY40IFD8OQj2wiSjE
Rm5tPl2eGcu8IjJMiW4zwReJimc10oXkxmCoBHf0VT2tMmWHtikQhM9a8F5XCYJf
Rkz7zRYqo1xMnNObezpfE7wP8Ta8xrNJbnLHWf5EwXNaP/iD8bbV77zZAMQkjSKU
WtIngXWf5zbnEDUTfm2Pv12j1Uz/a5AbNQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FJizEseIuNbi4kfQGYn7xSSTBTfuMB8GA1UdIwQYMBaAFG97eAurOvMZqPoWMipQ
Nst/JwRYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJrcEp1M0pNQWJHMUI0
Um1zdnQyQ2dWYVcyZFM2RUw5Z0d4RDJaZXdtcjVKLzEvNkY3Qjc4MEJBQjNBRjMx
OUE4RkExNjMyMkE1MDM2Q0I3RjI3MDQ1OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS82RjdCNzgwQkFCM0FGMzE5QThGQTE2MzIyQTUwMzZDQjdGMjcw
NDU4LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ya3BKdTNKTUFiRzFCNFJtc3Z0
MkNnVmFXMmRTNkVMOWdHeEQyWmV3bXI1Si8xLzMyMzgzMDM0M2EzMzY0MzAzNDNh
NjIzMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMjM2MzYzMjM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQoBD0EsDANBgkqhkiG9w0BAQsFAAOCAQEAYyNosKDhv8+m1IiYwSYb
RTb3HPxgz21/dR7kunUzuD+LtbVbIx/zxHORT7R02HCRYt134bLz0yZzhvQRuSm8
GwDcC68hFGO+IY37XvtuQlhu9KnYxDCF4ar2LZrEluzVxVkciz4tW8RW6Y9T/aWR
kQVpRsAlGG8yHVVFVb8yUokuJ9welH42eSYEetvMUfimnujWclqeiybGKBvFSPbc
hYRvIECDTH2X4YZXd3M9CRH+GcmhZWH7DOGHS3bNNbITGlXnPnwaIqEoOVhSd2MG
IvbmpmJucICsvknUEILe4TTUsYVfIKZrJ7x+QIoermAPZkKYnviWKJr7jDx85qCD
QQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org